MikroTik

biatche

which is even more important for you?
maybe another fix LCD?

no, KidControl.......

I agree. KidControl needs major improvement, like the full removal of it.

biatche

Much time spent on ipsec when one could spend time on wireguard and have better VPN.

biatche

I can't any longer access webui on vlan management port... coming from 2.7..... do i need to reset settings?.... what settings are required to be able to access webui from vlan99?

i did set the management port on the system page.

biatche

I too am facing this same issue, its really annoying.

biatche

I've been patient version after version since 2.3 Each time I upgrade, there's endless issues. Resetting resets to 2.0 and then I'd have to pray and hope it'd upgrade to the latest with my settings intact, and then having to restore again. This is on CSS326. Can mikrotik somehow allow RouterOS to be...

biatche

Maybe i can start the theory of poor wireless performance possibly due to high temps.

On paper hap ac2 and cap ac are such nice products.... but the reality of things is.....

and with Mikrotik being silent and all.... isnt helpful.

biatche

hi Mikrotik. I want to purchase this product.

I cannot accept this noise issue. Please give a response to this topic??

biatche

cAP AC arrived last night. Dropped it right in place where the wAP AC has been sitting for the past week. Updated to CURRENT packages. Set it to Caps-Man, matched the channels to what I had used on the other WAPs. Looks like I am getting an average of 189M using local forwarding. 100M SLOWER than t...

biatche

Hi, can MT confirm converage/throughput vs wap ac instead of me making a support ticket ...?

biatche

Configman and 3x wAP - all great. TX up 100mbit/s depending on the quality signal This same config in configman and connected only new 3x cAP (tyhsi same metod, vlan for capsman) - Tx under 10mbit/s when -49dB quality. Not good. Support whats going one ? Capsman, wAP and cAP in version 6.41.2 and t...

biatche

can MT confirm these issues instead of being silent? I plan to buy cap ac fast.... but problems must be ironed out first

biatche

small changelog, final version soon?

biatche

how much more powerful is hex cpu over hap ac2?

Considering hap ac2 as routers from now since it comes with wifi. wanna know how much i'd lose out on cpu

biatche

There now is support for "band=5ghz-n/ac" in the GUI but none in the capsman GUI.

My exact thoughts. Why?

biatche

did latest firmware also improve signal strength?

biatche

i questioned support about the worrying performance on this thread. they suggest to try the latest rc. will you guys give it a go?

biatche

i questioned support about the worrying performance on this thread. they suggest to try the latest rc. will you guys give it a go?

biatche

can anybody share wireless performance of hap ac2 vs hap ac? the comments on cap ac is quite scary and these two products were released (around?) the same time. looking to purchase a dozen of these but i must be assured they work well. lso, does hap ac2 support switch vlan / hw offload? this should ...

biatche

What's new in 6.42rc27 (2018-Feb-14 11:53): *) wireless - added support for "band=5ghz-n/ac" (CLI only); 1. setting this one within CAPSMAN would be nice to have. 2. What will be the difference between "band=5ghz-a/n/ac" and "5ghz-n/ac"? Some kind of old compatible mod...

biatche

*) wireless - fixed incompatibility with macOS clients

can mikortik tell us if this is (presumably) implied for capsman as well?

biatche

im actually very keen on purchasing cap ac........ but mikrotik needs to test this antenna complaint.

in fact, i questioned them about this in my email conversation and they claim that caps ac antenna should be better than wap ac if anything.

biatche

*) capsman - added "allow-signal-out-off-range" option for Access List entries (CLI only);

thanks for adding that... but i hope the spelling within winbox is allow-signal-out-of-range

biatche

biatche

i see that it's avail only in crs3xx, so does it mean that i cannot use vlan anymore in crs1xx? and hap-ac? or does it mean that it's vlan with limited functionality?

please explain

biatche

Here is the config from one controller: /caps-man access-list # Main rule to allow strong clients to have a high-speed connection add action=accept ap-tx-limit=40000000 client-tx-limit=10000000 interface=all signal-range=-80..120 # Rule to prevent clients on the fringe from using 100% of the radio ...

biatche

The new "/interface wireless access-list allow-signal-out-of-range" feature in 6.41 dramatically improved roaming wireless clients' connectivity. i emailed support and they said they don't plan on adding this feature for capsman. so they find this important for wireless but not capsman. v...

biatche

The new "/interface wireless access-list allow-signal-out-of-range" feature in 6.41 dramatically improved roaming wireless clients' connectivity. Thanks! Is it possible to add this functionality to "/caps-man access-list" as well? I am getting quite a few too-strong and too-weak...

biatche

Please inform about your plans,
when will work LACP with hardware offload in RouterOS (on crs 317)?
Depends on your answer, we will buy your equipment or not.
Thank you.

Yeah been waiting for it too, but they could be busy working on other extremely important enterprise features like kid control.

biatche

now i know i have many users complaining about my capsman setup. earning a terrible reputation. please fix.

biatche

*) kidcontrol - added initial support for "/ip kid-control" feature (CLI only); Why are you working on a new features that are not very important for Mikrotik users (there is firewall which can do much more for experienced users) and you are not fixing existing important issues? When you ...

biatche

add allow-signal-out-of-range=always authentication=no comment="Required signal strength to connect" forwarding=no interface=wlan1 signal-range=-120..-55

if my original rule accepts -80..120 and rejects -120..-81... do i need these rules still? or do i remove the reject rule altogether?

biatche

The new "/interface wireless access-list allow-signal-out-of-range" feature in 6.41 dramatically improved roaming wireless clients' connectivity. Thanks! Interesting, how does this feature work at all? Here is a lengthy discussion: https://forum.mikrotik.com/viewtopic.php?t=124884 Basical...

biatche

By upgrading from 6.40.5, will it automatically and intelligently add the correct rules to switch all the switch-related configurations to bridge ones?

biatche

What's actually the issue having 6.41 with the new bridge implementation? If it works it works... Yes, if it works... but yesterday I spent quite some time trying to migrate an existing complex configuration consisting of multiple bridges for different VLANs to the new 6.41RC and I have so far been...

biatche

V7 should have new kernel and totally new implementation of some functionalities. Do not skip so far... That is never going to work! They need to separate some of the changes into subreleases and packages, including RC versions, or this version is never going to materialize. I vote for releasing a ...

biatche

Dear mikrotik, why has development slowed down? In the past we used to see a new rc every 3-5 days.

biatche

New bridge implementation need: Hardware LACP bonding. Hardware setting per port of learning mode for mac-adresses max number and what to do when max is reached and or port/device restarted. per port ingress and egress hardware rate limiting. dhcp snooping with guard arp snooping with guard Option ...

biatche

Dear all, has the development of ROS slowed down or is it my wrong impresion? One RC sub-version every one to two weeks where it used to be every two to three days and even then, very sparse changelog. Even this thread has become relatively quiet. Can it possibly be that we approaching the end of v...

biatche

I atest to mducharme's complaints. There's no harm reverting the RADIUS timeout value change is there? Could issue a warning of some sort for those who set values in excess of recommended.

Waiting for MT's good news now.

biatche

Been a long day. I'm tasting my first time experience on 10gbit sfp+ on CRS326. I have a 10gbit nic (also first time) connected directly to the CRS326 and couldn't figure out why iscsi rates to a single client in my test environment were unstable 10-40MB/sec, at times less than 10MB/sec, FAR slower ...

biatche

I tryed to configure VLANs using the bridge hw offloading feature (CRS326). Basically: /interface bridge port add bridge=bridge interface=ether2 pvid=200 ... add bridge=bridge tagged=... untagged=ether02,.. vlan-ids=200 ... /interface bridge set bridge vlan-filtering=yes I stuck in two tasks. A) Ho...

biatche

facing this issue too.. wondering if mikrotik cares.

biatche

/export compact

paste relevant section

biatche

They had better fix it in 6.41. I'm not even doing anything complex.

I've seen other quirkiness with switch vlan, which i can't explain in simple words.

When I specify mac server on ether1, i expect it to just work. ESPECIALLY when the port is not assigned to any vlan. or any service or anything.

biatche

" Packets without vlan tag are treated just like if they had a vlan tag with port default-vlan-id. This means that if "vlan-mode=check or secure" to be able to forward packets without vlan tags you have to add a special entry to vlan table with the same vlan id set according to defaul...

biatche

deleted

biatche

biatche

When do we get LACP with Hardware offload in this new bridge implementation in routeros on switch devices such as CRS326-24G-2S+ and CRS-317-1G-16s+ Creating a bond and attaching it to the bride is done in software now and good know the cpu's in the switches is weak as hell. Forum police @andirys w...

biatche

would like to see some sample code on: say network has 3 vlans, vlan10,20,30 ether1,2 trunk ether 3 access port 10 ether 4, access port 10, tagged 20 ether 5, access port 20, tagged 10 ether 6, tagged 20,30, no untagged mind sharing please? while i do APPEAR to have a working setup, i once saw some ...

biatche

at the moment, is bridge+vlan still cli only?

is the new bridge implementation without issues now?

biatche

*) wireless - log "signal-strength" when successfully connected to AP;
Can you add a signal to the log and to the client when it was disconnected?

Do that for capsman too.

biatche

as topic

biatche

have you planned add HW offload with vlan-filtering function?

careful now, forum police andyris might warn you to post in feature request thread.

biatche

there should be testing or beta channel, rc channel (feature locked), stable(bugfix), mainline(current) This is just a naming convention, you just have to get used to it. In any case, please do NOT pollute this thread with the naming convention nonsense again. If you feel like you are in absolutely...

biatche

strods, are we looking feature complete for 6.41 yet? I'm just curious if it's down to polishing and bug fixes or if there's more that's intending to be added. I know I'm not the only one very eager for it. one thing that i've never understood about mikrotik is why they add new features to RC.there...

biatche

@andirys and mikrotik

*) bridge - implemented software based MSTP;

thank you for making this happen

biatche

if my ssh port is not on 22, how do i configure the ini?

biatche

Any chance you could add 'Radio Name' in the SNMP wireless registrations table? It is great having graphs of wireless clients but I do not know which is which without the name. Thanks.

+1 support for this

biatche

I'm with you guys. I'm not sure what class embedded designers are taught to use tiniest flash chip available on the market but I'd like to alter that curriculum. That said, I do get that in the hardware world, cents does multiply out to dollars when the sale quantity gets high enough. It seems like...

biatche

This was very easy to roll back with a partition. Just make the partition active that was right before the upgrade. Took seconds.. As I mentioned, everyone doing RCs should use partitions. I copy my current RC and config over to a partition before I try out a new RC. Any issue, I just move back.. I...

biatche

add tool: tcp/udp open port tester.

biatche

dynamic firewall address-list items are not being removed when they expire.

yes, i found myself blocked strangely by anti bruteforce rules...

biatche

will we be seeing MSTP in 6.40 (a latter RC) perhaps? is it in planning? Has it been promised? In case it has, can you provide a link, please? If not, please stop spamming with the topic not directly related to the 6.40rc series. !) bridge - implemented software based "igmp-snooping" (unt...

biatche

/tool fetch keep-result (yes | no; Default: yes) If yes, creates an input file.

rename this to save-tofile or something.... from what i am seeing, keep-result appears to save the output to disk. or is it input? i've no idea anymore.

MT could possibly hire an englishman to straighten the terms out.

biatche

1. +1! 2. If your dual wan setup depends on mangle be aware of: https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack Queues (except Queue Trees parented to interfaces), firewall filter and mangle rules will not be applied for FastTracked traffic. i made some workarounds to make fasttrack+ipsec+dualwa...

biatche

while doing some testing on dual wan (a lot of plugging and unplugging of ethernet cable / disabling of interfaces), i've also found that /ip route entries may SOMETIMES show as 'unreachable' but via command line it appears to be reachable. so probably a visual bug in winbox... fixed by reopening th...

biatche

1. add /ip route check-gateway-ping-interval
2. ability to customize fasttrack rules a little bit. more dual wan friendly. right now i cannot figure out a way to have fasttrack with both ipsec and multi wan, although it does appear possible if its just one extra feature.

biatche

will we be seeing MSTP in 6.40 (a latter RC) perhaps? is it in planning? Has it been promised? In case it has, can you provide a link, please? If not, please stop spamming with the topic not directly related to the 6.40rc series. https://forum.mikrotik.com/viewtopic.php?f=1&t=120946#p595389 bot...

biatche

will we be seeing MSTP in 6.40 (a latter RC) perhaps? is it in planning?

biatche

im facing this issue also.

biatche

i press and hold the reset button beside the usb and then power up the hap ac, never resets.

biatche

still no mstp?..

biatche

wheres the delete post button? looking to delete this post.

biatche

look people. its true that its annoying and convoluted. i didnt bother to check because i was in a hurry. i typed it and left my laptop immediately. at the same time, some 'reply with quote' buttons in other forums wouldn't quote the entire thing but only the last quote. in some others, its fully qu...

biatche

@biatche: Writing as moderator: Could you PLEASE DO NOT CITE FULL POST if it is not needed. Can you count ratio of your words to citation ? It is almost 0%. Do you think that it is necessary to make such long citations ? Do you think that full post need to be repeated post under post ? Do you think...

biatche

@biatche: Writing as moderator: Could you PLEASE DO NOT CITE FULL POST if it is not needed. Can you count ratio of your words to citation ? It is almost 0%. Do you think that it is necessary to make such long citations ? Do you think that full post need to be repeated post under post ? Do you think...

biatche

ipv4 firewall was reverted.

why was it reverted anyway

biatche

add action=accept chain=public comment=l2tp ipsec-policy=in,ipsec port=1701 protocol=udp vs add action=accept chain=public comment=l2tp ipsec-policy=in,none port=1701 protocol=udp https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter " For example, if router receives Ipsec encapsulated Gre p...

biatche

!) ipsec - added support for dynamic "action=notrack" RAW rules for policies;

can anybody share optimal firewall rules for l2tp/ipsec and ikev2 ipsec with regards to fasttrack

biatche

None knows that.

i do -- right after mstp.

i hope

biatche

Hello. When will it be possible to test mstp?

ive had numerous temptations to ask. so yeah lets see mstp, say next rc?

biatche

can anyone paste what the new default firewall config look like right now? i dont wanna install the latest rc as of yet. Here you go: /ip firewall nat add chain=srcnat out-interface-list=WAN action=masquerade comment="defconf: masquerade" /ip firewall { filter add chain=input action=accep...

biatche

can anyone paste what the new default firewall config look like right now? i dont wanna install the latest rc as of yet.

biatche

does capsman work better in any way compared to 6.37?

i am seeing a lot of rejected, forbidden by access list, and group key timeout, sending station leaving

anybody else?

biatche

mind telling me the point of -> ac <- when your backbone is 100mbps?

biatche

Why do you bother with 10/100 ethernet still? Why not just have gigabit ethernet on all (new) products? It's the standard these days everywhere. For example, HAP ac lite/ lite tower. So wireless can go beyond 100mbps but ethernet can only reach 100mbps. It doesn't make any sense. Sure you can have o...

biatche

can someone kindly share a working setup of ikev2+eap+radius?

biatche

request switch vlan support on RB750Gr3

biatche

I kinda want to ask what the scope was for the new STP implementation. Is it meant to basically run like per vlan rapid spanning tree protocol that is similar to Cisco? Basically instantiate rapid STP and then have the instance communicate with tagged packets? Per conversations that were had with s...

biatche

hoping to see STP implementations sooner than later. wouldn't mind using an rc in production just for this.

biatche

in v6.39 it will be possible.
Make a new CAPsMAN Channel entry with all those frequencies and specify that channel for the CAPs - it will automatically select one of those frequencies.

wanna give us an example of how XXXX works because i gave it several tries and still have no clue how it works

biatche

Please provide a method of restoring previous STP mode, whereby Router OS would exclusively transmit and process BPDUs on (R)STP bridge ports. I furthermore don't see the point of having independent STP processes running for each bridge, if the STP BPDU frames are leaked to ports that aren't member...

biatche

request: a default set if IPv6 firewall rules with IPv6 enabled be default

biatche

dear devs, please clarify if there are any ramifications set by the reverted BPDU change on the CRS in relation to bridge+STP. In short, should we create a bridge with RSTP still on the CRS. As in, is switch STP support reverted as well? It's very important we know this.

biatche

We have released 6.39rc80. It should be one of the latest rc releases before going to 6.39. Changelog: What's new in 6.39rc80 (2017-Apr-25 09:23): !) bridge - reverted bridge BPDU processing back to pre-v6.38 behaviour; (v6.40 will have another separate VLAN-aware bridge implementation); https://wi...

biatche

bump 2014 post

biatche

How about giving us MSTP and PVRSTP for 6.40? This way I can continue purchasing MT products.

to make PVRSTP you could just take your pre-6.38 code and modify it a little.

biatche

please, MSTP & PVRSTP next version...

biatche

Requesting for neater and more readable exports

currently:

export compact
/something1
some config
/something2
some config

suggestion:

export compact
/something1
some config

/something2
somet config

spacing them out improves readability a lot.

biatche

Please provide a method of restoring previous STP mode, whereby Router OS would exclusively transmit and process BPDUs on (R)STP bridge ports. I understand MikroTik removing VLAN tags from STP BPDU frames when people create VLANs on bridges, as in: int vlan add name=vlanXXX interface=bridge vlan-id...

biatche

Please provide a method of restoring previous STP mode, whereby Router OS would exclusively transmit and process BPDUs on (R)STP bridge ports. I understand MikroTik removing VLAN tags from STP BPDU frames when people create VLANs on bridges, as in: int vlan add name=vlanXXX interface=bridge vlan-id...

biatche

Welcome, friend..
seeing same issues, but only on CRS226:
viewtopic.php?f=3&t=111069
Still no workaround for this issue

Maybe mikrotik can replicate the issue but not solve it hence the silence. heh.

biatche

Spanning Tree is broken since 6.38. We want to implement redundant bridges, to link together carrier VLANs to customer ports or VLANs. The previous STP implementation was essentially similar to PVSTP (per VLAN Spanning Tree Protocol) but the new implementation results in routers sending and process...

biatche

Spanning Tree is broken since 6.38. We want to implement redundant bridges, to link together carrier VLANs to customer ports or VLANs. The previous STP implementation was essentially similar to PVSTP (per VLAN Spanning Tree Protocol) but the new implementation results in routers sending and process...

biatche

seriously, rc should be renamed to alpha or testing. while current should be renamed to beta and bugfix to stable.

biatche

Spanning Tree is broken since 6.38. We want to implement redundant bridges, to link together carrier VLANs to customer ports or VLANs. The previous STP implementation was essentially similar to PVSTP (per VLAN Spanning Tree Protocol) but the new implementation results in routers sending and process...

biatche

do you have any 6.38.x devices attached to it? or maybe even 6.39?

biatche

Hey! On conditional dhcp? no. Did send a mail on issues prevalent with bridge+vlan on 6.38.5 to which i havent received a reply after a week. How about you send them an email on this on 'our' behalf and see if they do actually reply. (Since they always reply to you) You could then let us know of th...

biatche

This is one attitude i dislike about mikrotik. They won't reply even when faced with important bugs. Maybe they only communicate with people they know. Disappointing. Did you shoot them a mail at support@mikrotik.com? They always answer those mails and that's the address to turn to when you have: f...

biatche

This is one attitude i dislike about mikrotik. They won't reply even when faced with important bugs. Maybe they only communicate with people they know. Disappointing. But I'm so much so looking forward to this feature. We should have modern networking booting for modern times. dnsmasq supports condi...

biatche

before you release final version, which i do feel is drawing near..... please test vlans on CRS bridge + HAP AC.. all on the latest version.

biatche

with dhcp server having conditions and rules example in dnsmasq: dhcp-match=set:x86,option:client-arch,0 dhcp-match=set:efi,option:client-arch,7 dhcp-boot=tag:efi,tag:!ipxe,ipxe.efi dhcp-boot=tag:x86,tag:!ipxe,undionly.kpxe we can conditionally set to use efi file or legacy. www.ipxe.org ipxe can do...

biatche

6.38.x severe issues. Alright, I'm very furious. So much wasted time and no profit. What's going on here? is 6.37.x = stable ; 6.38 = beta while 6.39 = alpha? Does Mikrotik warrant their users for such trouble? ALSO Lost a lot of credibility by my client here. I still look forward to IKEv2 so stayi...

biatche

6.38.x severe issues. Alright, I'm very furious. So much wasted time and no profit. What's going on here? is 6.37.x = stable ; 6.38 = beta while 6.39 = alpha? Does Mikrotik warrant their users for such trouble? ALSO Lost a lot of credibility by my client here. I still look forward to IKEv2 so stayi...

biatche

CAPSMAN controller: CCR1009 Wifi CAPS: WAP AC + HAP AC v6.36.4: working fine, reference speed wireless: 250-260Mbit/s v6.38.x : - massive wireless issues with capsman (continous disconnects, slow speeds) - RSTP causing forwarding issues (traffic not forwarding, DHCP not getting through) v6.39rcXX-5...

biatche

6.38.x severe issues. setup: gw = rb750gr3 <-> sw = crs125 <-> LAN & ap = wap ac / hap ac Things have been operational in 6.37.1 750g3,crs125 and 1x wap ac. I have 3 vlans, 1 for management, 2 for lan. I bought another few wap ac and hap ac to add to the network. First, I upgraded from 6.37.1 t...

biatche

im currently using

add band=5ghz-a/n/ac extension-channel=Ceee frequency=5580 name=channel122 \
    width=20

in hopes to get ac... is this the correct way?

its quite misleading. should we use 80mhz or..... 20+ Ceee or 80 + Ceee

please enlighten.

biatche

hi, i wish to get ikev2 server on MT running for the first time as a road warrior setup. clients will be entirely windows 7/10 for now... my only experience is with ipsec/l2tp 1) if i both client and server are dynamic ip (pppoe), how will the certs work? can i use a domain name (CNAME record) like ...

biatche

would ikev2 be considered stable by the time we reach 6.38 final?

biatche

(first time with trunks) im trying to create a trunk with vlan[10,20,30] between rb750gr3 and crs125. on the hex, ive created 3 vlans under ether5 (for trunk) -- do i need to bridge them or something? on the crs125 are this the correct steps? http://networkengineering.stackexchange.com/questions/265...

biatche

It's time to make a decision whether to purchase WAP ac or unifi UAP AC LITE UNIFI supports zero handoff, does MT have something similar or better? Also, I'll need multiple ssids for different isolated subnets on the CRS125.. do I need VLAN for each AP or is it possible to setup an "AP subnet&...

biatche

It's time to make a decision whether to purchase WAP ac or unifi UAP AC LITE UNIFI supports zero handoff, does MT have something similar or better? Also, I'll need multiple ssids for different isolated subnets on the CRS125.. do I need VLAN for each AP or is it possible to setup an "AP subnet&q...

biatche

You need license level 4 at least. Those devices have only level 3. See these:
http://routerboard.com/RBSXTG-5HPacD-SA
http://routerboard.com/RB921GS-5HPacD-15S
http://routerboard.com/RBSXTG-2HnD
And other similar devices...

Good to know. And.. actually, what do you recommend for indoor usage?

biatche

i intend to use as an AP controlled via capsman, with connectivity via ethernet. for phones, mobile devices.... and to locate it indoors.. can these be used indoors? or must it be exclusively outdoors? i've tried hap lite, cap2n and the wireless strength seem to be quite weak.. if its the device/lac...

biatche

http://routerboard.com/RBLHG-5nD http://routerboard.com/RBSXT5HacD2n Basically I wanna add decent wireless connectivity to any one of my wired mikrotik routers. example CRS125 / HEX.... Will any of the above work? Also, how do I choose between the two? What are the differences? I've only ever used C...

biatche

bump. urgent.

biatche

file content:

foo
bar
 a 123.111.111.111 single ip always
 bar

how do i get the ip into a variable? preferably by regex.

biatche

Hello I intend to purchase cloud smart router 24 port. I've always been using openwrt for home/small offices. Quite simple setups actually. I was advised that mikrotik routers is insecure out of the box and configuration is required to secure it. I want to know how complex it is, especially when tra...

Search found 128 matches